librekeys/pico-keys-sdk
0
0
Fork 0
mirror of https://github.com/librekeys/pico-keys-sdk.git synced 2026-07-28 08:01:51 -07:00
Code Issues Packages Projects Releases Wiki Activity
570 Commits 3 Branches 3 Tags
05fe0596ef004313e166b1e2f900e9af351dd26c
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Pol Henarejos 05fe0596ef Revert "Move EDDSA to another branch." 
This reverts commit 09ec0767b6.
 2025-12-11 15:42:30 +01:00
Pol Henarejos d86371bb2c Revert "Move Secure Boot to another branch." 
This reverts commit 8cb2484aa3.
 2025-12-11 15:42:21 +01:00
Pol Henarejos 8cb2484aa3 Move Secure Boot to another branch. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-09 21:37:36 +01:00
Pol Henarejos 7583ecff18 Fix applet cmp 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-09 19:15:22 +01:00
Pol Henarejos 09ec0767b6 Move EDDSA to another branch. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-09 15:36:29 +01:00
Pol Henarejos d0dea3d0c5 Fix MSOS/BOS descriptor. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-03 16:34:05 +01:00
Pol Henarejos 53d3a7ac91 Fix OTP button press in ESP32. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-02 14:38:07 +01:00
Pol Henarejos 2438356d83 Set anti-rollback version only when the binary is signed. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-02 09:39:17 +01:00
Pol Henarejos 79b69bfd7e Add WHOLE_ARCHIVE property. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-02 09:29:34 +01:00
Pol Henarejos d189c2978c Add anti-rollback argument. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 23:41:29 +01:00
Pol Henarejos c1cc33fd9d Upodate mbedtls only when necessary. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 17:02:47 +01:00
Pol Henarejos 2d72a157d5 Fix on AID selection. It should support shorter AID if matches. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 01:44:29 +01:00
Pol Henarejos 711a4df490 Upgrade to v8.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-30 18:30:24 +01:00
Pol Henarejos 66f31c15b6 Upgrade to mbedtls v3.6.5 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-30 18:28:13 +01:00
Pol Henarejos fa119d0c6e Fix build for ESP32. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 00:12:26 +01:00
Pol Henarejos b67e9ac143 Fix key generation for RP2040. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 00:12:18 +01:00
Pol Henarejos 5d3d10b62b Fix declaration. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 00:12:06 +01:00
Pol Henarejos 27938f0d9b Add reboot bootsel command. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 00:11:54 +01:00
Pol Henarejos 20117d1609 Add read secure boot status. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-18 01:06:44 +01:00
Pol Henarejos 8f4f5373cf Do not use secboot in Phy. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-18 01:06:31 +01:00
Pol Henarejos d4971bba19 Fix get secure boot status. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-18 01:06:20 +01:00
Pol Henarejos 2001006a16 Fix otp build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-17 12:23:16 +01:00
Pol Henarejos 7c5f729b69 Add is_secure_boot_enable and is_secure_lock_enabled to PHY. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-17 12:20:44 +01:00
Pol Henarejos 07bbadf34c Add support for reading memory status. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-17 11:52:25 +01:00
Pol Henarejos ed848d005f Fix curious bug when FIDO+OpenPGP+CCID connection is used in some circumstances. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-15 21:12:47 +01:00
Pol Henarejos e6c0227996 Fix VIDPID PHY Read. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-15 21:11:57 +01:00
Pol Henarejos 84f7952817 Add support for PHY read. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-15 20:13:42 +01:00
Pol Henarejos 116aca7697 Fix #if/else logic. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-15 20:13:42 +01:00
Pol Henarejos d410a4cfc2 Add support for RP2354. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-15 19:56:46 +01:00
Pol Henarejos 9b6d6f6736 Fix build 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-28 09:36:41 +01:00
Pol Henarejos 8f907b25ba Relicense project under the GNU Affero General Public License v3 (AGPLv3) 
and add the Enterprise / Commercial licensing option.

Main changes:
- Replace GPLv3 headers with AGPLv3 headers in source files.
- Update LICENSE file to the full AGPLv3 text.
- Add ENTERPRISE.md describing the dual-licensing model:
  * Community Edition: AGPLv3 (strong copyleft, including network use).
  * Enterprise / Commercial Edition: proprietary license for production /
    multi-user / OEM use without the obligation to disclose derivative code.
- Update README with a new "License and Commercial Use" section pointing to
  ENTERPRISE.md and clarifying how companies can obtain a commercial license.

Why this change:
- AGPLv3 ensures that modified versions offered as a service or deployed
  in production environments must provide corresponding source code.
- The Enterprise / Commercial edition provides organizations with an
  alternative proprietary license that allows internal, large-scale, or OEM
  use (bulk provisioning, policy enforcement, inventory / revocation,
  custom attestation, signed builds) without AGPL disclosure obligations.

This commit formally marks the first release that is dual-licensed:
AGPLv3 for the Community Edition and a proprietary commercial license
for Enterprise customers.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-26 20:06:16 +01:00
Pol Henarejos 233e6594c6 Add casts to fix warnings. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-12 18:52:07 +02:00
Pol Henarejos eca6807f8e Fix win build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-12 18:51:46 +02:00
Pol Henarejos 14d5a75571 Add some win compatibility. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-12 18:51:29 +02:00
Pol Henarejos e56624948b Expose gettimeofday. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-12 18:47:43 +02:00
Pol Henarejos 200d59f91b ADd strlcpy when necessary. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-12 18:47:34 +02:00
Pol Henarejos c165ae4838 Add set of secure functions to derive keys based on OTP, if available, and pico_serial as a fallback. PIN is also an input vector, which defines a separated domain. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-08 00:30:41 +02:00
Pol Henarejos 0ddfdf8134 Add sanity check. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-07 21:11:28 +02:00
Pol Henarejos 031d76737b Add pico_serial_hash as a source of unique (almost) 32 bytes string. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-07 21:11:06 +02:00
Pol Henarejos df94d10f8f Fix print macro. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-07 21:10:19 +02:00
Pol Henarejos b3b2b67034 Add const to OTP functions. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-06 14:21:41 +02:00
Pol Henarejos 3eff2442c6 Fix is_empty_otp_buffer when a register is invalid. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-06 14:21:41 +02:00
Pol Henarejos a7e1cf028b To prevent the PVC attack, MKEK and DEV keys are migrated to another OTP page. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-06 14:21:41 +02:00
Pol Henarejos e14a12b002 Add OTP chaff to avoid passive voltage contrast (PVC) attacks. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-06 14:21:41 +02:00
Pol Henarejos d39732c613 Allow data partition write only with secure code (not in BL). 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-06 14:21:41 +02:00
Pol Henarejos 56c2ef0cc1 Fix alignment when programming OTP. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-06 14:21:41 +02:00
Pol Henarejos 9b294b9685 Fix build 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-30 17:25:55 +02:00
Pol Henarejos 5048e07f81 Add hash functions using OTP as feed when available. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-28 20:28:28 +02:00
Pol Henarejos d63ed56e0e Fix phy_data idVendor/idProduct when not set. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-28 20:28:28 +02:00
Pol Henarejos afe2b28fab Merge remote-tracking branch 'origin/main' 2025-09-24 01:12:07 +02:00
Pol Henarejos 838f342877 Fix HID processing only for CTAP_HID. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-24 01:11:45 +02:00
Pol Henarejos 1a1d03ab2f Add compatibility for non-pico boards. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-24 01:11:19 +02:00
Pol Henarejos 809dc3d16d Add missing files. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-23 17:03:38 +02:00
Pol Henarejos 70c0c1bf81 Fix conditional build for non-pico platforms. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-23 16:59:59 +02:00
Pol Henarejos cff3f8f677 Fix interface conditional builds. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-23 16:56:34 +02:00
Pol Henarejos 6f6004c57b Fix build for non-pico boards. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-23 00:02:20 +02:00
Pol Henarejos 0b49fe4e1b Fix build for non-pico boards. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-22 23:52:47 +02:00
Pol Henarejos 4edc506759 Fix build for non-pico boards. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-22 23:35:46 +02:00
Pol Henarejos e55014cfb3 Fix set version for non-pico platforms. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-22 17:31:48 +02:00
Pol Henarejos 2211fafe32 Fix non-pico build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-22 17:30:39 +02:00
Pol Henarejos 276f1b2ae8 Fix build for non-pico platforms. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-22 17:27:08 +02:00
Pol Henarejos 202d32d13d Fix descriptor description when there are disabled interfaces. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-02 01:20:07 +02:00
Pol Henarejos 95f02b6ea7 Add dummy led driver to avoid crashes in case a non-supported board is built. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-01 22:02:08 +02:00
Pol Henarejos 2e2b78445c Load led driver depending on PHY. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-01 21:27:43 +02:00
Pol Henarejos da44fd21d4 Add support for led driver in PHY. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-01 21:27:15 +02:00
Pol Henarejos 365567d12b Upgrade tinycbor to 0.6.1 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-29 01:20:09 +02:00
Pol Henarejos a3406572cd Fix uint16 endianness that affected chained RAPDU. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-29 01:17:37 +02:00
Pol Henarejos 8321db1f67 Fix build for rp2350. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-25 01:39:06 +02:00
Pol Henarejos 5984d1f72d NK compatibility improvements. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-25 01:33:46 +02:00
Pol Henarejos 685e660ec0 Call pico_sdk_init in the cmake. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-25 01:33:23 +02:00
Pol Henarejos 3863842536 Fix crash in case response buffer is not 16bit aligned. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-24 01:22:59 +02:00
Pol Henarejos 113e720fca Merge remote-tracking branch 'origin/main' 2025-06-22 19:58:17 +02:00
Pol Henarejos c45c97ee1f Fix Pico Keys SDK build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-06-22 19:57:15 +02:00
Pol Henarejos d66d1c85b9 Add missing header. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-06-22 19:52:36 +02:00
Pol Henarejos f01aca5518 Flash size is obtained dynamically rather than in build time. It will allow to reduce dramatically the number of builds. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-30 12:06:26 +02:00
Pol Henarejos da3a7f25d0 Fix bool build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-25 19:20:04 +02:00
Pol Henarejos eb75ad4efa Add app_exists() to check if an AID is loaded. 2025-05-25 19:07:20 +02:00
Pol Henarejos 11d8a5343c Remove the tweak for packets multiple of 64 bytes. It was fixed in the USB stack handling (don't remember where). 
Fixes #95.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-23 20:17:57 +02:00
Pol Henarejos a324477a8a Fix interface descriptor when HID is disabled. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-02 18:28:38 +02:00
Pol Henarejos 580b0acffa Define MCU for emulation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:24:03 +02:00
Pol Henarejos 3990e7643a Fix EPNUM counting for ESP32. It fixes the problem of not sending KB. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-06 18:31:01 +02:00
Pol Henarejos 5718c83083 Upgrade TinyUSB for ESP32 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-06 18:26:34 +02:00
Pol Henarejos a75fd6b815 CTAP_RESP should be 0ed before sending. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-30 18:12:06 +02:00
Pol Henarejos 499e8fafaa Upgrade to mbedtls v3.6.3 and fix git subscripts. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-24 23:58:53 +01:00
Pol Henarejos 5f79a8c8ed Fix ESP32 dynamic USB interfaces. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-24 09:22:25 +01:00
Pol Henarejos a08abaed0f Enable each USB interface independently depending on PHY parameters. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-22 23:25:31 +01:00
Pol Henarejos 4ef641b8d3 Always build ccid if defined. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-22 23:25:04 +01:00
Pol Henarejos c185b35ca3 Add enabled USB interfaces in PHY. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-22 23:24:36 +01:00
Pol Henarejos f1b1382300 USB descriptors are now created dynamically. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-21 15:30:50 +01:00
Pol Henarejos f18f761234 Restore led mode when finishing button press. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-19 01:19:17 +01:00
Pol Henarejos 1a4ca13cc7 Add get led mode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-19 01:18:57 +01:00
Pol Henarejos ef9b66f990 Use TLV for PHY serialization/unserialization. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-17 11:36:14 +01:00
Pol Henarejos 7191cda6d3 Add PHY option to enable specific curves. It's in the app side the management. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-11 18:43:08 +01:00
Pol Henarejos 2c3fe5bebf Only pin to core in ESP32-S3 since it is multicore. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-07 19:35:13 +01:00
Pol Henarejos 9e9632f297 Fix commissioned values for LED. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-23 00:49:45 +01:00
Pol Henarejos 259c4854df Fix LED for ESP32S3 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-23 00:49:12 +01:00
Pol Henarejos 0a4c7b0981 Fix autobuild. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-21 19:56:19 +01:00
Pol Henarejos db338842b9 Add git pull when switch 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-21 19:12:19 +01:00
Pol Henarejos 71af710568 Add EDDSA support as a conditional build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-21 19:00:21 +01:00
Pol Henarejos e18f192edf Fix ESP32 build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-21 18:59:11 +01:00